Behavioral task
behavioral1
Sample
aaadd68cd4f8b2b574abbc718806f1b8ce0730de23ebc6eaa2acd3f7d46bfc6dN.exe
Resource
win7-20240708-en
General
-
Target
aaadd68cd4f8b2b574abbc718806f1b8ce0730de23ebc6eaa2acd3f7d46bfc6dN
-
Size
123KB
-
MD5
29d7c6293a09536dba51582ea920de70
-
SHA1
7f0d43be9fe65a462805011aab7a08dfc38338ac
-
SHA256
aaadd68cd4f8b2b574abbc718806f1b8ce0730de23ebc6eaa2acd3f7d46bfc6d
-
SHA512
c2af5818dae1e627c344a8f3102b6342e6a8596743da4203ee4a02cea24d791eb33322f8dc63b0e2dd3bc9cc3696c0074e33e72142b4543c7dc72bd713bee8a7
-
SSDEEP
1536:CTW7JJ7Tn4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk+p0RpYf4Dd6:h6WHIjN3tj6qnv0b2UrXkbvLw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource aaadd68cd4f8b2b574abbc718806f1b8ce0730de23ebc6eaa2acd3f7d46bfc6dN unpack001/out.upx
Files
-
aaadd68cd4f8b2b574abbc718806f1b8ce0730de23ebc6eaa2acd3f7d46bfc6dN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ